🦺 Now, it is also mandatory to add a username to the integration with registries 🦺

🦺 Now, it is also mandatory to add a username to the integration with registries 🦺

Author: springdo

tooling/charts/tl500-course-content/templates/stackrox/configure-stackrox-job.yaml

@@ -19,15 +19,20 @@ spec:
             - |
               test {{ .Values.verbose | default "false" }} == true && set -x
 
+              # ── Configuration ───────────────────────────────────────────────
+              STACKROX_NS="{{ index .Values "stackrox-chart" "stackrox" "namespace" }}"
+              CLUSTER_DOMAIN="{{ .Values.cluster_domain }}"
+              REGISTRY_ENDPOINT="image-registry.openshift-image-registry.svc:5000"
+
               # ── Step 1: Wait for StackRox Operator ──────────────────────────
               echo "⏳ [1/5] Waiting for StackRox operator CRD..."
               while [ true ]; do oc get crd centrals.platform.stackrox.io; if [ $? -eq 0 ]; then break; fi ; sleep 5s; done
               echo "✅ [1/5] StackRox CRD available"
 
               # ── Step 2: Wait for Central pods ───────────────────────────────
               echo "⏳ [2/5] Waiting for Central pods..."
-              while test 0 == $(oc -n {{ index .Values "stackrox-chart" "stackrox" "namespace" }} get pod -l app.kubernetes.io/component=central -o name 2>/dev/null | wc -l); do sleep 5; done
-              oc -n {{ index .Values "stackrox-chart" "stackrox" "namespace" }} wait pod -l app.kubernetes.io/component=central --for=condition=Ready --timeout=200s
+              while test 0 == $(oc -n ${STACKROX_NS} get pod -l app.kubernetes.io/component=central -o name 2>/dev/null | wc -l); do sleep 5; done
+              oc -n ${STACKROX_NS} wait pod -l app.kubernetes.io/component=central --for=condition=Ready --timeout=200s
               if [ $? != 0 ]; then
                 echo "🛑 [2/5] Timed out waiting for Central pods";
                 exit 1;
@@ -37,8 +42,8 @@ spec:
 
               # ── Step 3: Get StackRox credentials ────────────────────────────
               echo "⏳ [3/5] Retrieving StackRox admin credentials..."
-              ROX_ENDPOINT=central-stackrox.{{ index .Values "stackrox-chart" "stackrox.namespace" | quote }}
-              ROX_ADMIN_PASSWD=$(oc -n {{ index .Values "stackrox-chart" "stackrox" "namespace" }} get secret central-htpasswd -o jsonpath='{.data.password}' | base64 --decode)
+              ROX_ENDPOINT="central-${STACKROX_NS}.${CLUSTER_DOMAIN}"
+              ROX_ADMIN_PASSWD=$(oc -n ${STACKROX_NS} get secret central-htpasswd -o jsonpath='{.data.password}' | base64 --decode)
               echo "✅ [3/5] Credentials retrieved"
 
               # ── Step 4: Wait for pipeline ServiceAccount ────────────────────
@@ -49,7 +54,26 @@ spec:
               # ── Step 5: Configure registry integration ──────────────────────
               echo "⏳ [5/5] Creating token and configuring StackRox registry integration..."
               TOKEN=$(oc create token pipeline -n tl500 --duration=8760h)
-              RET=$(curl -sk -u "admin:${ROX_ADMIN_PASSWD}" "https://$ROX_ENDPOINT/v1/imageintegrations" -d "{\"id\": \"\",\"name\": \"tl500\",\"categories\": [\"REGISTRY\"],\"docker\": {\"endpoint\": \"image-registry.openshift-image-registry.svc:5000\",\"username\": \"\",\"password\": \"${TOKEN}\",\"insecure\": true},\"autogenerated\": false,\"clusterId\": \"\",\"clusters\": [],\"skipTestIntegration\": false,\"type\": \"docker\" }" | jq .error)
+              PAYLOAD=$(cat <<EOF
+              {
+                "id": "",
+                "name": "tl500 - OCP internal registry",
+                "categories": ["REGISTRY"],
+                "docker": {
+                  "endpoint": "${REGISTRY_ENDPOINT}",
+                  "username": "pipeline",
+                  "password": "${TOKEN}",
+                  "insecure": true
+                },
+                "autogenerated": false,
+                "clusterId": "",
+                "clusters": [],
+                "skipTestIntegration": false,
+                "type": "docker"
+              }
+              EOF
+              )
+              RET=$(curl -sk -u "admin:${ROX_ADMIN_PASSWD}" "https://${ROX_ENDPOINT}/v1/imageintegrations" -d "$PAYLOAD" | jq .error)
               if [[ ${RET} != "null" && ! -z ${RET} ]]; then
                 echo "🛑 [5/5] Failed to set image integration: ${RET}";
                 exit 1;